$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/38cc9063-fc37-349c-9675-3e8f6dafcc2a.roa File: 38cc9063-fc37-349c-9675-3e8f6dafcc2a.roa (raw, json) Hash identifier: xY0yAp9kMfnPa4/cPhnhWhMXqZYzR492T/Yjl0stmoI= Subject key identifier: EF:AF:33:00:7A:1F:79:4C:4E:40:1D:F8:EE:23:F1:56:F0:16:1D:3A Certificate issuer: /CN=711a04de-db2a-4e54-8693-ca6a2c107ab4 Certificate serial: 010D0C9F4328584B1AD1912ADBD0CD2363702500 Authority key identifier: 9E:4C:B6:A1:BA:B0:AD:5C:D2:C8:7D:DA:CF:9C:C2:79:6E:0B:36:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/38cc9063-fc37-349c-9675-3e8f6dafcc2a.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 400426 IP address blocks: 128.254.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/711a04de-db2a-4e54-8693-ca6a2c107ab4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/711a04de-db2a-4e54-8693-ca6a2c107ab4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:91:2a:db:d0:cd:23:63:70:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=711a04de-db2a-4e54-8693-ca6a2c107ab4 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=925fde75-3edf-441b-b32c-79019101d563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:29:7e:88:40:74:24:bf:93:71:8a:61:a8:6b: 3c:d2:75:71:eb:1a:13:70:9b:93:96:ad:fc:fd:8b: 8d:bc:89:43:e8:53:49:67:87:2f:52:4a:cd:8a:8a: a6:40:75:62:d0:0f:c7:85:d7:62:8d:d7:47:82:9a: 1c:cb:35:5a:42:6d:c8:f0:14:9c:a0:ba:32:3f:96: e8:a1:8e:20:96:ac:23:59:ae:77:d2:00:0e:dd:2a: 86:32:80:90:22:5d:ee:bf:7d:49:d5:e3:78:04:b2: 60:df:1c:a7:c3:f4:7a:d4:02:b1:d1:c8:08:0b:82: 31:bf:18:40:a4:7d:6a:1a:69:1a:63:35:57:fa:60: 0a:1d:58:bf:41:6a:5e:ca:45:33:4b:1f:b5:e9:3b: 89:80:43:9b:b1:ec:de:95:04:cf:75:e3:ad:e8:0a: 32:ca:e4:81:fd:df:4a:2e:b8:47:8e:2d:22:4e:75: e3:90:3b:94:22:7a:7a:b3:37:d9:a8:cc:f8:d3:54: e7:e9:31:37:c7:11:d6:55:69:f8:f0:97:3c:a4:8a: 7a:e8:b2:84:6e:98:ca:14:3e:2d:61:ee:a9:6c:f4: b9:13:76:9f:e8:fb:13:c8:ee:36:ab:99:82:86:e9: 83:2d:e4:a8:bd:c1:ab:06:fe:43:9a:ec:ca:59:8d: 7e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:AF:33:00:7A:1F:79:4C:4E:40:1D:F8:EE:23:F1:56:F0:16:1D:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/38cc9063-fc37-349c-9675-3e8f6dafcc2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/711a04de-db2a-4e54-8693-ca6a2c107ab4.crl X509v3 Authority Key Identifier: keyid:9E:4C:B6:A1:BA:B0:AD:5C:D2:C8:7D:DA:CF:9C:C2:79:6E:0B:36:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4.cer sbgp-ipAddrBlock: critical IPv4: 128.254.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:5f:7c:73:f7:ac:79:d8:6d:d4:1b:93:5c:d5:ee:f6:58:cb: 30:2d:51:8a:df:b5:b3:57:4a:f8:cd:42:32:3e:59:d6:b8:37: 66:e9:e9:44:7b:d6:83:10:18:9f:03:34:67:cf:f6:31:f7:0e: 77:c7:3a:e8:d2:0f:69:db:0e:81:b3:39:2d:3c:00:cc:5b:21: 3d:da:19:a0:bf:c0:53:cd:c0:2f:57:f8:57:2b:5c:31:6c:71: 8d:5e:65:51:17:9d:00:96:b4:fb:32:61:c2:3e:71:3e:c5:f3: 31:50:46:ed:19:6c:94:5d:d1:4c:e6:aa:e5:31:de:8c:a5:53: 06:50:f1:64:38:24:98:db:09:ce:43:1e:ef:b7:cc:b5:53:8c: 2e:ca:06:71:87:17:f4:a1:d4:b8:6e:08:9c:9b:bd:f3:60:db: 78:97:84:e9:5d:26:a0:ce:20:a2:05:60:a7:d6:11:a3:af:62: 05:ab:ae:18:65:96:40:35:67:42:bf:d4:25:1f:43:6a:58:73: 01:4f:e9:55:ad:25:46:37:70:22:df:57:52:77:21:42:73:92: f7:9d:89:71:e2:c3:55:1d:bd:b1:bf:c9:fc:c7:0b:12:77:a0: 35:6d:c2:8d:7e:a3:be:e7:1f:f9:e6:27:d9:c8:ed:37:4f:57: f1:2f:0b:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0ZEq29DNI2NwJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzExYTA0ZGUtZGIyYS00ZTU0LTg2OTMtY2E2YTJjMTA3 YWI0MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk OTI1ZmRlNzUtM2VkZi00NDFiLWIzMmMtNzkwMTkxMDFkNTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCl+iEB0JL+TcYphqGs80nVx6xoTcJuTlq38 /YuNvIlD6FNJZ4cvUkrNioqmQHVi0A/HhddijddHgpocyzVaQm3I8BScoLoyP5bo oY4glqwjWa530gAO3SqGMoCQIl3uv31J1eN4BLJg3xynw/R61AKx0cgIC4IxvxhA pH1qGmkaYzVX+mAKHVi/QWpeykUzSx+16TuJgEObsezelQTPdeOt6AoyyuSB/d9K LrhHji0iTnXjkDuUInp6szfZqMz401Tn6TE3xxHWVWn48Jc8pIp66LKEbpjKFD4t Ye6pbPS5E3af6PsTyO42q5mChumDLeSovcGrBv5DmuzKWY1+KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+vMwB6H3lMTkAd+O4j8VbwFh06MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83MTFh MDRkZS1kYjJhLTRlNTQtODY5My1jYTZhMmMxMDdhYjQvMzhjYzkwNjMtZmMzNy0z NDljLTk2NzUtM2U4ZjZkYWZjYzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzExYTA0ZGUtZGIyYS00ZTU0LTg2 OTMtY2E2YTJjMTA3YWI0LzcxMWEwNGRlLWRiMmEtNGU1NC04NjkzLWNhNmEyYzEw N2FiNC5jcmwwHwYDVR0jBBgwFoAUnky2obqwrVzSyH3az5zCeW4LNp0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83MTFhMDRkZS1kYjJhLTRlNTQtODY5My1jYTZh MmMxMDdhYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgP6IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpffHP3rHnYbdQbk1zV7vZYyzAtUYrftbNXSvjNQjI+Wda4N2bp6UR7 1oMQGJ8DNGfP9jH3DnfHOujSD2nbDoGzOS08AMxbIT3aGaC/wFPNwC9X+FcrXDFs cY1eZVEXnQCWtPsyYcI+cT7F8zFQRu0ZbJRd0UzmquUx3oylUwZQ8WQ4JJjbCc5D Hu+3zLVTjC7KBnGHF/Sh1LhuCJybvfNg23iXhOldJqDOIKIFYKfWEaOvYgWrrhhl lkA1Z0K/1CUfQ2pYcwFP6VWtJUY3cCLfV1J3IUJzkvediXHiw1UdvbG/yfzHCxJ3 oDVtwo1+o77nH/nmJ9nI7TdPV/EvC08= -----END CERTIFICATE-----Generated at Mon Nov 3 08:48:49 2025 by rpki-client